mir/bind
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-29 13:38:26 +00:00
Code Issues Releases Wiki Activity

Updated to reflect the existence of the entropy API

Browse Source
This commit is contained in:
Brian Wellington 2000-06-14 23:03:21 +00:00
parent b5f24a6988
commit 9dc499f133
1 changed files with 5 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
doc/misc/dnssec
View File

@ -15,11 +15,10 @@ The tools for generating DNSSEC keys and signatures are now in the
bin/dnssec directory. Documentation for these programs can be found
in doc/arm/Bv9ARM.4.html.
The random data used in generating DNSSEC keys and signatures
currently contains a significant pseudo-random component and is
therefore not cryptographically strong. We do not recommend that keys
generated by the key generation tools in this distribution be used in
production.
The random data used in generating DNSSEC keys and signatures comes from
/dev/random if the OS supports that. Otherwise, the DNSSEC tools must
be fed a file containing entropy/random data. Future releases will allow
entropy to be entered manually from the keyboard.
Serving secure zones
@ -69,4 +68,4 @@ an update occurs. Advanced access control is possible using the
"update-policy" statement in the zone definition.
$Id: dnssec,v 1.2 2000/05/23 16:41:25 gson Exp $
$Id: dnssec,v 1.3 2000/06/14 23:03:21 bwelling Exp $